Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
File:                     4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer (raw, json)
Hash identifier:          1edhcmVVbzdE2CrbPO85gIPAX1RaVGs4gCzzdjLaBYo=
Subject key identifier:   31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285848387DC2845EFACFF2F15A8E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Dec 2024 01:45:32 +0000
Certificate not after:    Sun 21 Mar 2027 00:45:32 +0000
Subordinate resources:    IP: 69.24.141.0/24
                          IP: 209.127.233.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:7d:c2:84:5e:fa:cf:f2:f1:5a:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec 16 01:45:32 2024 GMT
            Not After : Mar 21 00:45:32 2027 GMT
        Subject: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:bc:6d:ca:c0:64:46:ce:0c:19:41:62:41:
                    88:15:5b:a3:59:ef:a8:07:6d:47:5c:1e:6a:8e:da:
                    d6:4a:be:ed:57:99:e4:d8:ae:2a:00:de:1f:7d:57:
                    75:90:c2:ae:a2:41:94:ab:f5:f9:a3:b0:ce:34:ad:
                    a4:59:98:60:23:1d:01:0e:73:45:c0:60:29:33:ee:
                    ee:51:42:e9:6e:6f:3a:25:70:50:e8:23:23:1d:50:
                    ef:8c:d2:d4:b4:70:61:1a:8b:23:f9:0d:b8:50:dc:
                    f3:88:7c:0d:c6:19:56:d0:0d:df:1a:ed:1f:b7:d6:
                    7b:e0:6c:e9:29:8a:06:e3:b7:ad:fc:50:1f:0b:df:
                    37:c3:4d:7e:fb:a7:c5:59:90:33:bc:8c:2c:6c:43:
                    74:25:27:d1:36:b7:cb:06:94:71:5b:fa:45:45:87:
                    77:14:d8:a3:89:fa:a9:42:10:b6:ab:bc:20:89:12:
                    a8:45:a5:fe:29:df:31:4f:d2:b1:7e:6d:9e:5a:e3:
                    3e:55:9f:06:24:32:f4:61:60:17:7f:cf:39:8c:40:
                    54:ad:81:c3:29:c2:12:30:59:82:40:72:bf:15:2e:
                    0f:63:23:94:b2:76:a5:fe:76:a5:d4:bf:e2:df:2d:
                    f7:d8:05:76:69:51:f4:3a:eb:81:07:4e:f9:61:d7:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.24.141.0/24
                  209.127.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:68:84:2d:c2:f3:6c:7d:29:03:ac:33:72:92:62:8a:34:a0:
         db:69:2a:98:a8:27:2d:f3:26:7d:23:29:cb:5c:90:94:8d:ca:
         47:b3:d2:b7:ef:5f:7e:b4:3d:2b:fb:b8:bb:aa:17:1e:2a:07:
         8f:cd:cb:3e:ea:0f:0c:ed:2e:62:4e:98:78:9f:a9:8f:5e:ae:
         3e:b9:6d:05:ad:fa:d3:46:0a:39:7a:30:1f:17:a0:fe:4b:93:
         f6:51:65:aa:52:61:93:b9:3e:e4:48:29:d7:4c:0d:6e:93:ef:
         40:bd:70:df:f3:03:2b:a2:b9:cd:a5:fa:c9:36:fc:be:df:d4:
         f1:e2:3a:76:08:f5:1e:14:f4:73:be:1a:99:d5:71:8a:04:a0:
         c7:80:82:b9:6c:14:33:39:7e:3e:30:b2:62:d1:8d:8c:b7:50:
         8c:c7:5a:06:fd:e8:e5:ef:01:aa:5b:e3:60:1b:ff:2b:3e:d9:
         a9:e3:8d:98:aa:4d:29:2a:cd:3c:da:fc:ef:88:0e:08:34:99:
         38:30:13:0a:7a:46:02:60:c6:0a:5b:f4:f8:f9:eb:f8:85:20:
         c7:dc:f9:be:2b:0b:c5:5c:71:e1:02:42:c0:0c:66:a3:b6:76:
         64:bb:ed:a9:a6:be:3b:ed:da:33:ad:44:bd:af:ac:aa:69:c9:
         65:f4:9d:af
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEg4fcKEXvrP8vFajoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MTIxNjAxNDUzMloXDTI3MDMyMTAwNDUzMlowLzEtMCsGA1UEAxMk
NGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2OGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIe8bcrAZEbODBlBYkGIFVujWe+oB21HXB5q
jtrWSr7tV5nk2K4qAN4ffVd1kMKuokGUq/X5o7DONK2kWZhgIx0BDnNFwGApM+7u
UULpbm86JXBQ6CMjHVDvjNLUtHBhGosj+Q24UNzziHwNxhlW0A3fGu0ft9Z74Gzp
KYoG47et/FAfC983w01++6fFWZAzvIwsbEN0JSfRNrfLBpRxW/pFRYd3FNijifqp
QhC2q7wgiRKoRaX+Kd8xT9Kxfm2eWuM+VZ8GJDL0YWAXf885jEBUrYHDKcISMFmC
QHK/FS4PYyOUsnal/nal1L/i3y332AV2aVH0OuuBB075YdctQwIDAQABo4IEBTCC
BAEwHQYDVR0OBBYEFDHF4J2nQhfvJ0d+jqUpjT8z8uVNMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80
ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRmOGVjMjVkLTkzMmEtNGRkNC04
ZjgzLWYxZGEwNDkwNjhlYy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5
MDY4ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBABFGI0DBADRf+kwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI2iELcLzbH0p
A6wzcpJiijSg22kqmKgnLfMmfSMpy1yQlI3KR7PSt+9ffrQ9K/u4u6oXHioHj83L
PuoPDO0uYk6YeJ+pj16uPrltBa3600YKOXowHxeg/kuT9lFlqlJhk7k+5Egp10wN
bpPvQL1w3/MDK6K5zaX6yTb8vt/U8eI6dgj1HhT0c74amdVxigSgx4CCuWwUMzl+
PjCyYtGNjLdQjMdaBv3o5e8BqlvjYBv/Kz7ZqeONmKpNKSrNPNr874gOCDSZODAT
CnpGAmDGClv0+Pnr+IUgx9z5visLxVxx4QJCwAxmo7Z2ZLvtqaa+O+3aM61Eva+s
qmnJZfSdrw==
-----END CERTIFICATE-----
Generated at Tue Feb 11 23:57:05 2025 by rpki-client